DES-7200 CLI Reference Guide
Usage
guidelines
Examples
Related
commands
45.2 Authorization Related Commands
At present, DES-7210 supports authorization to the network protocols.
45.2.1
Use this command to authorize the command executed by the user who has logged in the
NAS CLI. The no form of this command is used to disable the aaa authorization command
function.
aaa authorization commands level {default | list-name} method1 [method2...]
no aaa authorization commands level {default | list-name}
Parameter
description
Once the default login authentication method list has been
configured, it will be applied to all the terminals automatically. If
non-default login authentication method list has been applied to the
terminal, it will replace the default one. If you attempt to apply the
undefined method list, it will prompt a warning message that the login
authentication in this line is ineffective till it is defined.
The following example defines an AAA Login authentication method
list named list-1. In the authentication method list, first the local user
database is used for authentication. Then apply this method to VTY
0-4.
DES-7210(config)# aaa authentication login list-1 local
DES-7210(config)# line vty 0 4
DES-7210(config-line)# login authentication list-1
Command
aaa new-model
login
authentication
username
aaa authorization commands
Parameter
Description
level
Command level to be authorized, 0-15.
When this parameter is used, the following defined
default
method list is used as the default method for command
authorization.
Chapter 45 AAA Configuration Commands
Description
Enable the AAA security service.
Configure the Login authentication
method list.
Define a local user database.
45-7